AMENDMENTS 

In the Claims 

The following is a marked-up version of the claims with the language that is underlined 
(" ") being added and the language that contains strikethrough (" — ") being deleted: 

1.-20. (Canceled) 

21 . (Currently Amended) A computer-readable medium comprising: 

computer-readable code adapted to instruct a programmable device to search for a first 
piece of sensitive i nformat i on; information, the first piece of sensitive information including 
personal information regarding at least one user: 

computer-readable code adapted to instruct a programmable device to search for a 
second piece of sensitive i nformat i on; information, the second piece of sensitive information 
including personal information regarding the at least one user; 

computer-readable code adapted to instruct a programmable device to obtain a result of 
the search for the first piece of sensitive information; 

computer-readable code adapted to instruct a programmable device to obtain a result of 
the search for the second piece of sensitive information; 

computer-readable code adapted to instruct a programmable device to assign a first 
scor e to th e obta i n e d r e su l t of th e s e arch for th e f i rst p ie c e of s e ns i t i v e data, score, the first 
score ass i gn e d i n accordanc e w i th a pr e d e f i n e d cr i t e r i on; being determined from the number of 
occurrences of the first piece of sensitive data, as revealed in the search for the first piece of 
sensitive data; 

computer-readable code adapted to instruct a programmable device to assign a second 
scor e to th e obta i n e d r e su l t of th e s e arch for th e s e cond p ie c e of s e ns i t i v e data, score, the 
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second score ass i gned i n accordanco w i th tho prodof i nod cr i tor i on; being determined from the 
number of occurrences of the first piece of sensitive data, as revealed in the search for the first 
piece of sensitive data; 

computer-readable code adapted to instruct a programmable device to combine the first 
score and the second score; 

computer-readable code adapted to instruct a programmable device to provide the 
combined score to a user; and 

computer-readable code adapted to instruct a programmable device to determine, from 
the combined score, a risk for at least one identity-related vulnerability. 

22. (Previously Presented) The computer-readable medium of claim 21 , wherein 
sensitive information includes at least one of the following: a name, an address, a social 
security number, a telephone number, and an email address. 

23. (Currently Amended) The computer-readable medium of claim 21 , wherein 
determining the risk for at least one identity-related vulnerability includes determining a 
magnitude of risk for identity theft. 

24. (Currently Amended) The computer-readable medium of claim 21 , wherein 
determining the risk for at least one identity-related vulnerability includes determining a 
magnitude of risk for a privacy breach. 

25. (Currently Amended) The computer-readable medium of claim 21 , wherein 
determining the risk for at least one identity-related vulnerability includes determining a 
magnitude of risk for receiving spam. 
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26. (Previously Presented) The computer-readable medium of claim 21 , wherein the 
computer-readable code adapted to instruct a programmable device to search for the first piece 
of sensitive information is configured to search one or more web pages. 

27. (Previously Presented) The computer-readable medium of claim 21 , wherein the 
computer-readable code adapted to instruct a programmable device to search for the second 
piece of sensitive information is configured to search one or more web pages. 

28. (Currently Amended) A method comprising: 

searching for a first piece of sensitive informat i on; information, the first piece of sensitive 
information including personal information regarding at least one user; 

searching for a second piece of sensitive i nformat i on; information, the second piece of 
sensitive information including personal information regarding the at least one user; 

obtaining a result of the search for the first piece of sensitive information; 

obtaining a result of the search for the second piece of sensitive information; 

assigning a first scoro to tho obta i ned result of the search for the f i rst p i oco of sons i t i vo 
data, score, the first score be i ng ass i gned i n accordance w i th a prodof i nod cr i ter i on; being 
determined from the number of occurrences of the first piece of sensitive data, as revealed in 
the search for the first piece of sensitive data; 

assigning a second scoro to tho obtained resu l t of tho search for tho second p i oco of 
sons i t i vo data, score, the second score ass i gned i n accordance w i th tho prodof i nod cr i ter i on; 
being determined from the number of occurrences of the second piece of sensitive data, as 
revealed in the search for the second piece of sensitive data; 

combining the first score and the second score; 

providing the combined score to a user; and 

determining, from the combined score, a risk for at least one identity-related 
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vulnerability. 



29. (Previously Presented) The method of claim 28, wherein sensitive information 
includes at least one of the following: a name, an address, a social security number, a 
telephone number, and an email address. 

30. (Currently Amended) The method of claim 28, wherein determining the risk for at 
least one identity-related vulnerability includes determining a magnitude of risk for identity theft. 

31 . (Currently Amended) The method of claim 28, wherein determining the risk for at 
least one identity-related vulnerability includes determining a magnitude of risk for a privacy 
breach. 

32. (Currently Amended) The method of claim 28, wherein determining the risk for at 
least one identity-related vulnerability includes determining a magnitude of risk for receiving 
spam. 

33. (Previously Presented) The method of claim 28, wherein searching for the first 
piece of sensitive information includes searching one or more web pages. 

34. (Previously Presented) The method of claim 28, wherein searching for the 
second piece of sensitive information includes searching one or more web pages. 

35. (Currently Amended) A system comprising: 

a first searching component configured to search for a first piece of sensitive 
i nformat i on; information, the first piece of sensitive information including personal information 



regarding at least one user; 

a second searching component configured to search for a second piece of sensitive 
i nformat i on; information, the second piece of sensitive information including personal 
information regarding the at least one user; 

a first obtaining component configured to obtain a result of the search for the first piece 
of sensitive information; 

a second obtaining component configured to obtain a result of the search for the second 
piece of sensitive information; 

a first assigning component configured to assign a first score to tho obta i ned resu l t of 
the search for tho f i rst p i oco of sons i t i vo data, score, the first score be i ng ass i gned i n 
accordanco w i th a predef i ned cr i tor i on; being determined from the number of occurrences of the 
first piece of sensitive data, as revealed in the search for the first piece of sensitive data; 

a second assigning component configured to assign a second scoro to tho obta i ned 
resu l t of tho search for tho second p i oco of sons i t i vo data, score, the second score ass i gned i n 
accordanco w i th tho prodof i nod cr i tor i on; being determined from the number of occurrences of 
the second piece of sensitive data, as revealed in the search for the second piece of sensitive 
data; 

a combining component configured to combine the first score and the second score; 
a providing component configured to provide the combined score to a user; and 
a determining component configured to determine, from the combined score, a risk for at 
least one identity-related vulnerability. 

36. (Previously Presented) The system of claim 34, wherein sensitive information 
includes at least one of the following: a name, an address, a social security number, a 
telephone number, and an email address. 
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37. (Currently Amended) The system of claim 34, wherein determining the risk for at 
least one identity-related vulnerability includes determining a magnitude of risk for identity theft. 

38. (Currently Amended) The system of claim 34, wherein determining the risk for at 
least one identity-related vulnerability includes determining a magnitude of risk for a privacy 
breach. 

39. (Currently Amended) The system of claim 34, wherein determining the risk for at 
least one identity-related vulnerability includes determining a magnitude of risk for receiving 
spam. 

40. (Previously Presented) The system of claim 34, wherein searching for sensitive 
information includes searching one or more web pages. 
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